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METHOD OF CONVERTING A NETWORK ADDRESS 

5 Background of the Invention : 
Field of the Invention : 
The invention lies in the communications technology field and 
pertains, more specifically, to a method for the conversion of 
a network address. 

10 

A communications system which is configured for information 
transmission, in particular for voice data transmission, is 
;™ known from the product document "Sonderausgabe telcom report 
*, und Siemens Magazin Com: ISDN im Buro - HICOM" [Special issue 

fffLb telcom report and Siemens Magazine Com: ISDN in the Office - 
m HICOM] , Siemens AG, Berlin and Munich, 1985, in particular 
H= from pages 26-37. The communications system comprises an 

operational and data server which is integrated in the 
communications system and by means of which the communications 
2 0 system is administered - remote administration and remote 
maintenance - from an external service center. Data are 
thereby exchanged bidirectionally between the service center 
and the communications system via, for example, a public 
communications network, by means of appropriate modems. 

25 
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In addition to the conventional, voice-data-oriented access 
units, modern communications systems generally have access to 
a computer network, for example a local area network LAN. The 
connection to the computer network is thereby provided by a 
5 separate peripheral assembly. A communications system having 
such a computer network access assembly is known, for example, 
from commonly assigned German patent application No. 19 9 4 6 
504 (European published patent application EP 1 089 53 0 A2) . 

10 The devices - for example personal computers - which are 
:;~ connected to a computer network, and the computer network 

j'l itself, are in this case normally addressed using an IP 

Ll address (IP = Internet Protocol) associated with the 

=i respective device or via a network address associated with the 

0^15 computer network. The IP address uniquely identifies the 

devices connected to the computer network, or the computer 
^ network itself, in which case the IP addresses can be 

allocated individually by a communications system 

administrator. In the context of such a computer network, the 
20 literature frequently refers to a private address area for 

specific IP addresses - defined by the RFC (Request For 

Comments) . 

The individual allocation of IP addresses by the 
25 communications system administrator results in a problem in 
that computer networks connected to different communications 
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systems, and the devices connected to the computer network, 
are assigned the same IP addresses and thus, from outside the 
communications system, the IP addresses can no longer be 
uniquely associated with a device or a computer network. For 
5 this reason, when administering a computer network or a device 
connected to the computer network from the service center, it 
is necessary for a device which controls the setting up of 
connections in the service center - frequently referred to as 
a router in the literature - to be manually appropriately 
10 reconfigured before each connection is set up, so that a 
connection is set up to the appropriate device to be 
administered. However, if there are a large number of devices 
to be administered, this is associated with considerable 
complexity. 

15 

Summary of the Invention : 

The object of the present invention is to provide a method of 
converting a network address which overcomes the above-noted 
deficiencies and disadvantages of the prior art devices and 
2 0 methods of this general kind, and which allows the complexity 
for administration to be reduced, or even avoided completely. 

With the above and other objects in view there is provided, in 
accordance with the invention, a method of converting a 
25 network address, which comprises: 
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on receiving a message in a communications device, checking a 
sender network address to determine whether a sender network 
address is intended for address conversion, and 

if the sender network address is intended for address 
5 conversion, converting a received destination network address 
to a communications -device- internal network address. 

A major advantage of the method according to the invention is 
that the method according to the invention can easily be 
10 integrated in existing systems. 

In accordance with an added feature of the invention, the 
network address is an IP address. 

15 In accordance with an additional feature of the invention, a 
conversion address mask stored in a communications device is 
used to determine which parts of the destination network 
address need to be converted to the communications- device - 
internal network address. 

20 

In accordance with another feature of the invention, for the 
check as to whether address conversion is to be carried out, a 
list with network addresses intended for address conversion is 
stored in the communication device. 

25 
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In accordance with a further feature of the invention, for the 
check as to whether address conversion is to be carried out, a 
determination is made of the route via which a link to the 
communication device has been set up. 

5 

In accordance with again an added feature of the invention, 
the communication device is a communications system providing 
access to a computer network to be administered, and the 
sender network address is used to identify a data processing 
10 device associated with a service center. 

^1 In accordance with again an additional feature of the 
i^T invention, addressing of the computer network to be 

ai administered and of the devices which are connected to the 

rro_5 computer network and are to be administered is carried out 
from the service center via a virtual network address which 
uniquely identifies the computer network or those devices 
which are connected to the computer network. 



2 0 In accordance with again another feature of the invention, for 
transmitting a response message from a device which is 
associated with the computer network, a check is carried out 
to determine whether the network address of the data 
processing device which is associated with the service center 

25 is intended for address conversion, and, in situations in 
which this is the case, the network address of the device 
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which is connected to the computer network is converted to a 
service-center-compatible virtual network address. 

In accordance with a concomitant feature of the invention, the 
5 conversion address mask which is stored in the communication 
device is used to determine which parts of the network address 
of the device which is associated with the computer network 
are to be converted into the service-center-compatible virtual 
network address. 



One advantage of these refinements of the invention is, inter 
n alia, that manual reconfiguration of the router device in the 
il service center can be avoided by assigning virtual network 
- addresses and converting the network addresses used in the 

tfll5 course of a connection, in a central device associated with 

the devices to be administered. 

Other features which are considered as characteristic for the 
invention are set forth in the appended claims. 

20 

Although the invention is illustrated and described herein as 
embodied in a method for conversion of a network address, it 
is nevertheless not intended to be limited to the details 
shown, since various modifications and structural changes may 
25 be made therein without departing from the spirit of the 
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invention and within the scope and range of equivalents of the 
claims . 

The construction and method of operation of the invention, 
however, together with additional objects and advantages 
thereof will be best understood from the following description 
of specific embodiments when read in connection with the 
accompanying drawings . 

Brief Description of the Drawings : 

Fig. 1 is a structural diagram which schematically illustrates 
a first exemplary embodiment of the major functional units 
involved with the method according to the invention; 

Fig. 2 is a structural diagram which schematically illustrates 
a second exemplary embodiment of the major functional units 
involved with the method according to the invention; 

Fig. 3 is a flowchart illustrating the major method steps 
which take place when transmitting a message from a data 
processing device associated with the service center to a 
device which is to be administered; and 

Fig. 4 is a flowchart illustrating the major method steps 
which take place when transmitting a message from the device 
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to be administered to the data processing device associated 
with the service center. 



Description of the Preferred Embodiments : 
5 Referring now to the figures of the drawing in detail and 
first, particularly, to Fig. 1 thereof, there is seen a 
structogram schematically illustrating a first exemplary 
embodiment of the invention of the major functional units 
involved with the method according to the invention. In this 

10 case, a service center SZ, a first communications system PBX-A 
and a second communications system PBX-B are connected to one 
another via a communications network KN, for example an ISDN- 
oriented communications network (indicated by the ISDN in 
brackets) . A service network LAN— S , with data processing 

15 devices connected to it, is connected via an access unit AE to 
the service center SZ. By way of example, the illustration 
shows a data processing device DV-S - referred to as a service 
computer DV-S in the following text - with an associated IP 
address IP-A = 13 9.176.10.34. 

20 

Furthermore, a first computer network LAN-A is connected to 
the first communications system PBX-A, and a second computer 
network LAN-B, with data processing devices connected to it, 
is connected to the second communications system PBX-B. By way 
25 of example, a first and a second data processing device DV-A1, 
DV-A2 are illustrated for the first computer network LAN-A, 
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and a first and a second data processing device DV-B1, DV-B2 
are also illustrated for the second computer network LAN-B . 
The arrangement to be administered from the service center SZ 
and comprising the first communications system PBX-A, the 
5 first computer network LAN-A and the data processing devices 
DV-A1, DV-A2 connected to it, is referred to in the following 
text as the first remote system RS-A. The arrangement 
comprising the second communications system PBX-B, the second 
computer network LAN-B and the data processing devices DV-B1, 
_10 DV-B2 connected to it is referred to in the following text as 
the second remote system RS-B. 

l2 Both the first and the second computer networks LAN-A, LAN-B 
Hi have the same associated network addresses 1P-A = 10.0.0.x in 

fills the respective remote system RS-A, RS-B. In this case, the 
ffl access unit AE which provides the access for the computer 
^ network LAN-A, LAN-B to the respective communications system 
PBX-A, PBX-B is - in accordance with the normally used 
conventions - in each case allocated to IP address 10.0.0.254. 
2 0 The first and the second data processing devices DV-A1, DV-A2, 
DV-B1, DV-B2 of the respective computer networks LAN-A, LAN-B 
are respectively allocated the IP addresses IP-A = 10.0.0.1 or 
IP-A = 10.0.0.2. 

25 For unique addressing of the first and second computer 

networks LAN-A, LAN-B from the service center SZ, the first 
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computer network LAN-A is allocated the virtual IP address IP- 
A = 55.0.0.0 in the service center, and the second computer 
network LAN-B is allocated the virtual IP address IP-A = 
56.0.0.254. In addition, a table TAB-AD is stored in the 
service computer DV-S which is connected to the service 
network LAN-S, in which table the devices to be administered 
by the service center SZ are listed. By way of example, an 
entry is shown for the first remote system RS-A, and an entry 
for the second remote system RS-B. The IP address IP-A = 
55.0.0.0 is stored for administration of the first remote 
system RS-A, and the IP address 56.0.0.254 is stored for 
administration of the second remote system RS-B. 

In combination with a network mask 255.255.255.0 - not shown - 
the storage of the IP address IP-A = 55.0.0.0 associated with 
the first remote system RS-A defines the fact that the entire 
first computer network LAN-A is intended for administration by 
the service center SZ . On the other hand, the storage of the 
IP address IP-A = 56.0.0. 254 associated with the second remote 
system RS-B defines the fact that only the access unit AE 
which provides access for the second computer network LAN-B to 
the second communications system PBX-B is intended for 
administration by the service center SZ. 

Furthermore, what is referred to as a routing table TAB-RO is 
stored in the service center for setting up connections 
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between the service center SZ and the first or second 
communications system PBX-A, PBX-B, which table includes the 
call numbers RN-A, RN-B, which are associated with the virtual 
addresses IP-A = 55.0.0.0, IP-A = 56.0.0.254 of the first and 
second remote systems RS-A, RS-B respectively, for setting up 
connections via the communications network KN to the 
respective communications system PBX-A, PBX-B associated with 
the remote system RS-A, RS-B. 

A conversion list and a conversion network mask for conversion 
of the addresses in the respective remote system RS-A, RS-B 
are stored both in the first communications system PBX-A and 
in the second communications system PBX-B. An association, 
which is defined in the course of any address conversion to be 
carried out, between the communications -system- internal 
network address and the virtual network address is stored in 
the conversion list. Matching the service center SZ, the 
virtual network address IP-A = 55.0.0.0 associated with the 
communications -system- internal network address IP-A = 10.0.0.0 
is stored in the first remote system RS-A for the first 
computer network LAN-A. The virtual network address IP-A = 
56.0.0.254 associated with the communications -system- internal 
network address IP-A = 10.0.0.0 is stored in the second remote 
system RS-B for the second computer network LAN-B. 
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A network mask provides a general definition as to which of 
the 4 bytes of an IP address IP-A - formed in accordance with 
version IPv4 - identify the computer network LAN-A, LAN-B - 
frequently referred to as the network element in the 
literature - and which identify the devices DV-A, DV-B 
connected to the computer network LAN-A, LAN-B, or identify 
the access unit AE - frequently referred to as the host 
element in the literature - which provides the access for the 
computer network LAN-A, LAN-B to the respective communications 
system PBX-A, PBX-B. By way of example, a conversion network 
mask 255.255.255.0 is illustrated, which defines the fact that 
the first 3 bytes of an IP address IP-A - network element - 
identify the respective computer network LAN-A, LAN-B, and the 
fact that the fourth byte of an IP address IP-A - host element 
- identifies a device DV-A, DV-B, AE which is connected to the 
respective computer network LAN-A, LAN-B. Since the byte 
values 0 and 255 - as is indicated on the basis of the 
illustrated conversion network mask 255.255.255.0 - are each 
allocated a special significance, a maximum of 254 devices 
connected to a computer network LAN-A, LAN-B can in 
consequence be addressed by means of the present network mask 
255.255.255.0 - by the IP addresses IP-A = 10.0.0.1 to IP-A = 
10 . 0 . 0 . 254 . 

In the present exemplary embodiment, the first and the second 
computer networks LAN-A, LAN-B are each addressed by the first 

-12- 



GR 00 P 12364 

3 bytes of a respective IP address IP-A, that is to say by 
means of the addresses 10.0.0.x (x = 0, . .., 255). The access 
units are identified uniquely - in accordance with the 
normally used conventions - by the fourth byte of the 
5 corresponding IP address IP-A = 10.0.0. 254 , the first data 
processing device DV-A1, DV-B1 is identified uniquely by the 
fourth byte IP-A = 10.0.0.1, and the second data processing 
device DV-A2, DV-B2 is identified uniquely by the fourth byte 
IP-A = 10.0.0.2. 

O 10 

Sj; Alternatively, it is possible to use a network mask 
W 255.255.0.0 for addressing the devices DV-A, DV-B, AE, 

connected to a computer network LAN- A, LAN-B to reserve two 
(or even more) bytes of an IP address IP-A. This is the 
rV 15 situation when more than 254 devices are intended to be 
S connected to a computer network LAN-A, LAN-B. Furthermore, a 

network mask 255.255.255.128 also allows only parts of the 
fourth byte - for example only the last 7 bits - of an IP 
address IP-A to be reserved for addressing the devices DV-A, 
20 DV-B, AE connected to a computer network LAN-A, LAN-B. This is 
worthwhile, for example, when forming what are referred to as 
subnetworks and when, for example, a maximum of 12 8 devices 
are intended to be connected to a computer network LAN-A, LAN- 
B. 
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Furthermore, routing entries for bidirectional data 
interchange between the respective remote system RS-A, RS-B 
and the service center SZ via the communications network KN 
are stored both in the first communications system PBX-A and 
in the second communications system PBX-B. In this case, a 
further network address IP-A = 192.168.0.10 is stored such 
that it is associated with the network address IP-A = 
13 9.176.10.0 stored for a setting up process with the service 
network LAN-S . This further network address IP-A = 
192.168.0.10 uniquely identifies, for example, a non- 
illustrated network node in the communications network KN to 
which a message is transmitted from one of communications 
systems PBX-A, PBX-B and from which the message is passed on 
autonomously to the service center SZ. Such a network node is 
referred to as an ISDN partner in the following text. For 
setting up a connection from the respective communications 
system PBX-A, PBX-B to the ISDN partner - or the network node 
in the communications network KN - a partner call number RN-P 
which is associated with the ISDN partner in the 
communications network KN is stored in addition to the further 
network address IP-A = 192.168.0.10 associated with the ISDN 
partner. According to the first exemplary embodiment of the 
invention, the network addresses IP-A = 192.168.0.10 intended 
for address conversion are identified by an appropriate 
conversion identification ADR-MAP-FLAG. 
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If the call number RN-S of the service center SZ is available 
directly in the respective communications system PBX-A, PBX-B, 
the conversion identification ADR-IVIAP-FLAG can be allocated 
directly to the network address IP-A = 13 9.176.10.0 of the 
5 service center SZ . 

Referring now to Fig. 2, there is shown a structogram which 
schematically illustrates a second exemplary embodiment of the 
invention of the major functional units involved with the 

10 method according to the invention. The second exemplary 

embodiment of the invention differs from the first exemplary 
embodiment only in that a decision as to whether address 
conversion is to be carried out is not made on the basis of 
the route selected for setting up a connection between the 

15 service center SZ and the respective communications system 
PBX-A, PBX-B, that is to say this is not done using an ISDN 
partner involved in the connection. In contrast to the first 
exemplary embodiment, a service list with the sender network 
addresses intended for address conversion is, in the second 

2 0 exemplary embodiment, stored in each of the communications 
systems PBX-A, PBX-B. By way of example, the illustration 
shows a service list with an entry for the service network 
LAN-S having the network address IP-A = 139.176.10.0. There is 
thus no need to use a conversion identification ADR-MAP-FLAG 

25 in this exemplary embodiment. The service list allows 

deliberate selection or exclusion of service computers DV-S 
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connected to the service network LAN-S for administration of a 
respective remote system RS-A, RS-B, in a simple manner. 

The address conversion process according to the invention will 
5 be described in more detail in the following text using the 
example of the first remote system RS-A and with reference to 
Figs . 1 and 2 . 



The flowchart of Fig. 3 illustrates the major method steps 
10 which take place when transmitting a message - for example 

which is to be transmitted in the course of administration - 
from the service computer DV-S to the first data processing 
device DV-A1 in the first remote system RS-A. In order to 
transmit a message to the first remote system RS-A, the 
15 virtual IP address IP-A = 55.0.0.0 for the first computer 

network LAN -A is determined from the table TAB-AD stored in 
the service computer DV-S. After this, a message is 
transmitted to the first remote system RS-A by means of the IP 
address IP-A = 55.0.0.1 - referred to as the virtual 
20 destination address in the following text - which identifies 
the first data processing device DV-A1 in the first remote 
system RS-A. The call number RN-A associated with the virtual 
IP address IP-A = 55.0.0.0 is determined in the service center 
SZ by means of the routing table TAB-RO stored there, and this 
25 call number RN-A is used to set up a connection to the first 

communications system PBX-A via the communications network KN. 
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An identification and authentication procedure is then started 
in the first communications system PBX-A. Access to 
communications -system- internal data and services is in this 
5 case allowed only after successful identification and 

authentication of the service computer DV-S, of the service 
center SZ, or of the subscriber using the service computer DV- 
S in the first communications system PBX-A. In this case, the 
service computer DV-S can be identified, for example, via the 
10 IP address IP-A = 13 9.176.10.34 associated with the service 

computer DV-S in the service network LAN-S . Authentication can 
be carried out, for example, by the user who is using the 
service computer DV-S transmitting a password. 

15 After successful identification and authentication of the 
service computer DV-S, of the service center SZ or of the 
subscriber using the service computer DV-S in the first 
communications system PBX-A, the source address IP-A = 
139,176.10.34 (which corresponds to the IP address of the 

2 0 service computer DV-S) is determined in the first 

communications system PBX-A, and a check is then carried out 
to determine whether the received source address IP-A = 
13 9.176.10.34, and the service network LAN-S identified by the 
received source address IP-A = 139.176.10.34, are intended for 

25 address conversion. 
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According to the first exemplary embodiment of the invention, 
the check to determine whether address conversion is to be 
carried out takes place on the basis of the route via which a 
connection is set up between the service center SZ and the 
5 first communications system PBX-A, that is to say the ISDN 
partner via which the connection has been set up. Using the 
routing entries, described with reference to Fig. 1, in the 
first communications system PBX-A, the source address IP-A = 
139.176.10.34 is used to determine that the connection has 
10 been set up via the ISDN partner whose network address is IP-A 
= 192.168.0.10. A check is carried out in a next step to 
determine whether the conversion identification ADR-MAP-FLAG 
is set for this ISDN partner. 

15 According to the second exemplary embodiment of the invention, 
the check to determine whether address conversion is to be 
carried out takes place on the basis of a service list in 
which the source addresses intended for address conversion are 
stored. 

20 

If the source address is not intended for address conversion, 
that is to say no conversion identification ARD-MAP-FLAG 
(exemplary embodiment 1) is set for an ISDN partner which has 
been determined, or if the source address is not entered in 
25 the service list (exemplary embodiment 2) , the method is 
ended. 
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If, on the other hand, and as stated in the two exemplary 
embodiments, the source address is intended for address 
conversion, the conversion network mask 255.255.255.0 is used 
5 to determine the network and the host element of the virtual 
destination address IP-A = 55.0.0.1 to be converted. In a next 
step, the network element of the virtual destination address 
IP-A = 55.0.0.x is replaced by the network element of the 
communications -system- internal destination address IP-A = 

10 10.0.0.x, thus resulting in a communications -system- internal 
destination address IP-A = 10.0.0.1. Finally, the message is 
transmitted by the first communications system PBX-A, using 
the converted destination address IP-A = 10.0.0.1, to the 
first data processing device DV-A1 in the first remote system 

15 RS-A. 

In the case of the second remote system RS-B, a check of the 
host element is carried out in addition to the address 
conversion of the network element. If, for example, the 

20 service computer DV-S uses the IP address IP-A = 56.0.0.1 to 
address the first data processing device DV-B1 in the second 
remote system RS-B, the host element is additionally converted 
from IP-A = 10.0.0.1 to IP-A = 10.0.0.254 in the second 
communications system PBX-B in addition to the address 

25 conversion of the network element from IP-A = 55.0.0.1 to IP-A 
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= 10.0.0.1, so that only the access unit AE intended for 
administration can be addressed. 



The flowchart of Fig. 4 illustrates the major method steps 
5 which take place when transmitting a response - for example 
which is to be transmitted in the course of administration - 
from the first data processing device DV-A1 in the first 
remote system RS-A to the service computer DV-S. The service 
computer DV-S is in this case addressed by means of the 

10 destination address IP-A = 139.176.10.34 which is transmitted 
in the course of the message and identifies the service 
computer DV-S. In a next step, a check is carried out to 
determine whether address conversion is to be carried out for 
this destination address IP-A = 139.176.10.34 in the first 

15 communications system PBX-A. 



According to the first exemplary embodiment of the invention, 
the check to determine whether address conversion is to be 
carried out takes place on the basis of the route via which a 

2 0 connection is to be set up between the first communications 
system PBX-A and the service center SZ, that is to say the 
ISDN partner via which the connection is to be set up. The 
routing entries, which have been described with reference to 
Fig. 1, in the first communications system PBX-A are used to 

25 determine, by means of the destination address IP-A = 

13 9.176.10.34, that the connection is to be set up via the 

-20- 



GR 00 P 12364 

ISDN partner whose network address is IP-A = 192.168.0.10. In 
a next step, a check is carried out to determine whether the 
conversion identification ADR- MAP -FLAG is set for the ISDN 
partner identified by the IP address IP-A = 192.168.0.10. 

5 

According to the second exemplary embodiment of the invention, 
the check to determine whether address conversion is to be 
carried out takes place on the basis of the service list in 
which the network addresses intended for address conversion 
10 are stored. 



If the destination address IP-A = 192.168.0.10 is not intended 
for address conversion, that is to say no conversion 
identification ADR- MAP -FLAG is set (exemplary embodiment 1) 
15 for an ISDN partner which has been determined, or if the 

source address is not entered in the service list (exemplary 
embodiment 2) , the response is transmitted with the source 
address IP-A = 10.0.0.1 to the service computer DV-S. 



20 If, in contrast, the destination address IP-A = 192.168.0.10 - 
as stated in the two exemplary embodiments - is intended for 
address conversion, the conversion network mask 255.255.255.0 
is used to determine the network and host element of the 
communications -system- internal source address IP-A = 10.0.0.1 

25 to be converted. In a next step, the network element of the 
communications -system- internal IP address IP-A = 10.0.0.1 is 
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replaced by the network element of the virtual IP address IP-A 
= 55.0.0.x, resulting in a virtual source address IP-A = 
55.0.0.1. In situations in which the connection between the 
first communications system PBX-A and the service center SZ no 
5 longer exists, the routing entries which are stored in the 

first communications system PBX-A - in particular the partner 
call number RN-P - are used to set up a connection to the 
service center SZ via the communications network KN, and the 
response is transmitted together with the converted source 
...JL0 address IP-A = 155.0.0.1 to the service computer DV-S. 
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